494a218ffff55879244896ed552b35c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

494a218ffff55879244896ed552b35c9_JaffaCakes118
Size

664KB
MD5

494a218ffff55879244896ed552b35c9
SHA1

7c9e8f414035d448d2a89dd7eff0dc8a1685c094
SHA256

67db3665977b29b4a3e79aec8e3c0cee277cbb4fe79937c49dc372d0c870f637
SHA512

52740c956c59f3e0037cbf5c97c894938a419ac8ab0d2a10ee339fa42036d9b384f8e1db04080da8b3f5d0089d565a717c185ce93913a0dd4d0348349683d126
SSDEEP

12288:dzMUq6ziy7F3CYInaJwDPyp2sXB7kHK6KWzjTYJsOuec+Wjwb3Eg8iU6mCUs/Z8q:dz4vc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
494a218ffff55879244896ed552b35c9_JaffaCakes118

Files

494a218ffff55879244896ed552b35c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

563f47e9c524993f9e480bd821133345

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord516
ord665
ord595
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord573
ord681
ord100
ord617
ord650
ord581

Sections

.text
Size: 644KB - Virtual size: 643KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ